Hi folks,

I’m wondering if someone can help me out with this little issue: As those of you who run bridged with management VLANs know, it is impossible to access an SM without tagging the frames coming from your tech’s laptop. In a Prizm/BAM environment a VLAN profile will get pushed to an SM as soon as it authenticates… making alignments by techs pretty difficult.

My big idea was to have a “tech” VLAN profile where the management and untagged ingress VIDs are the same. Leaving NAT on, they can still reach even after the radio has linked up and been assigned an IP by Prizm. What would be even better is if they could get at our intranet while the radio was still like that.

Thing is, the SMs won’t NAT to the management IP. If a NAT Public IP is entered manually it works great. However, when set to DHCP the SM never grabs an address. Since this is a lab environment I have verified that the server indeed works (took of NAT and got an IP on my PC). Packet captures show that the proper response is being sent back to the SM, but it just hangs there forever.

My basic configuration:

Active Configuration Untagged Ingress VID : 303
Management VID : 303
SM Management VID Passthrough : Enabled
Dynamic Ageing Timeout : 25
Allow Learning : No
Allow Frame Type : All Frame Types

Current VID Member Set:
VID Number Type Age
303 Permanent 0

LAN1 Network Interface

Ethernet Interface : 100Base-TX Full Duplex
IP address :
Subnet Mask :
DHCP status : DHCP not enabled

RF Public Network Interface (Valid only when NAT enabled with public addressing)
IP address :
Subnet Mask :
Gateway IP address :
DHCP status : DHCP not enabled

NAT Public Network Interface (Valid only when NAT enabled)
IP address :
Subnet Mask :
Gateway IP address :
DHCP status : Initiating IP Discovery…

subnet netmask {
option domain-name-servers,;
option ntp-servers;
option routers;
option subnet-mask;
option broadcast-address;
default-lease-time 600;
max-lease-time 1200;

Running firmware 9.0 on a P10 900 MHz SM.